Security Consultant - NAC

A career in IBM Consulting is rooted by long-term relationships and close collaboration with clients across the globe. You'll work with visionaries across multiple industries to improve the hybrid cloud and AI journey for the most innovative and valuable companies in the world. Your ability to accelerate impact and make meaningful change for your clients is enabled by our strategic partner ecosystem and our robust technology platforms across the IBM portfolio, including Software and Red Hat. Curiosity and a constant quest for knowledge serve as the foundation to success in IBM Consulting. In your role, you'll be encouraged to challenge the norm, investigate ideas outside of your role, and come up with creative solutions resulting in groundbreaking impact for a wide network of clients. Our culture of evolution and empathy centers on long-term career growth and development opportunities in an environment that embraces your unique skills and experience 

1. NAC Implementation & Management:
   • Design, deploy, upgrade and manage HPE Aruba ClearPass Policy Manager for zero-trust security, enforcing role-based access controls across wired, and VPN infrastructures
   • Configure authentication methods (e.g., 802.1X, PEAP, MAC Auth, EAP-TLS) and troubleshoot issues like captive portal redirections or MAC address conflicts.
   • Integrate ClearPass with third-party systems (e.g., SIEM, firewalls, TACACS+, RADIUS for contextual security enforcement.
   • Perform PoC for the different Network vendor devices to check compatibility with Aruba ClearPass NAC.
2. Policy Automation & Threat Response:
   • Creation of policy, profile, cluster and enforcement.
   • Automate responses to security incidents (e.g., quarantine non-compliant endpoints via ClearPass OnGuard)
   • Posture policy testing and compliance check.
   • Work with Network teams to implement Switch with Radius and TACACS+ workflow
   • Integrate ClearPass with Active Directory, LDAP, Radius, DHCP, and other identity sources.
3. Security & Compliance:
   • Conduct vulnerability assessments, audits, and root-cause analyses for NAC/wired environment incidents.
   • Perform regular Compliance checks, patching and upgrades of the ClearPass environment
   • Monitor logs and alerts, and work with Security/Network team on Incident response related to Network Access Control. (NAC)
4. Training & Documentation:
   • Train IT teams/end-users on ClearPass workflows (e.g., guest access portals, self-service device onboarding)
   • Maintain documentation for configurations, policies, and integrations (ex. SOP, Report, Returns etc.)

• Technical Expertise:
  • Proficiency in ClearPass Policy Manager, Onboard, OnGuard, and Guest modules.
  • Hands-on experience with RADIUS, TACACS+, LDAP, and 802.1X protocols.
  • Familiarity with network tools (Wireshark, SolarWinds) and troubleshooting.
• Soft Skills:
  • Ability to collaborate with cross-functional teams (IT, security, vendors)
  • Problem-solving for complex NAC/wireless issues (e.g., docking station MAC conflicts)

• Certifications (Preferred):
  • Aruba Certified ClearPass Associate (ACCA)
  • Aruba Certified ClearPass Professional (ACCP)
  • Cisco CCNA/CCNP Security or CWNP